Can't change ownership of /dev/fuse in lxc

el_pedr0

Renowned Member
Aug 5, 2016
24
3
68
48
I'm trying to get fuse configured in a container but /dev/fuse is always owned by nobody:nogroup unless I chown the /dev/fuse on the proxmox host itself.

I'd like user 10000 in the container to own /dev/fuse in the container. Container user 10000 is mapped to 110000 on the host. If I chown 110000:110000 /dev/fuse on the host then in the container ls /dev/fuse appears as 10000:10000. However, if on the host /dev/fuse is owned by root:root, then it's always nobody:nogroup in the container.

My lxc .conf is as follows:
Code:
arch: amd64
cores: 2
features: fuse=1,nesting=1
hostname: pods.example.com
memory: 1024
mp0: /rpool/pods/containers,mp=/mnt/containers
mp1: /bodpool/cloud/recipes,mp=/mnt/recipes
mp2: /bodpool/cloud/recipes/tandoor,mp=/mnt/recipes/tandoor
mp3: /bodpool/cloud/photos,mp=/mnt/photos
mp4: /bodpool/cloud/photos/immich,mp=/mnt/photos/immich
net0: name=eth0,bridge=vmbr0,firewall=1,gw=192.168.1.254,hwaddr=XX:25:31:91:96:79,ip=192.168.1.28/24,type=veth
onboot: 1
ostype: ubuntu
rootfs: local-zfs:subvol-128-disk-1,size=8G
startup: order=3
swap: 0
unprivileged: 1
lxc.mount.entry: /dev/fuse dev/fuse none bind,create=file,uid=110000 0 0
lxc.idmap: u 1614000000 1614000000 200000
lxc.idmap: g 1614000000 1614000000 200000
lxc.idmap: u 0 100000 65536
lxc.idmap: g 0 100000 65536
lxc.idmap: u 100000 1100000 65536
lxc.idmap: g 100000 1100000 65536
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir

It's as though the uid=110000 has no effect in the lxc.mount.entry option.
I'd be grateful for any help to diagnose.
 
Last edited:
I should add:
The host:
Code:
root@toast:~# cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 12 (bookworm)"
NAME="Debian GNU/Linux"
VERSION_ID="12"
VERSION="12 (bookworm)"
VERSION_CODENAME=bookworm
ID=debian

And
Code:
root@toast:~# pveversion
pve-manager/8.1.3/b46aac3b42da5d15 (running kernel: 6.5.11-7-pve)

And the container:
Code:
root@pods:~# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 23.10
Release:        23.10
Codename:       mantic